Skip to content

Prepare the Image

Rob Coward edited this page Oct 18, 2016 · 1 revision

The pfsense.yaml HEAT template has been written to make use of the Open Source pfSense firewall appliance that can be downloaded from https://www.pfsense.org/download/

The steps used to prepare the image for use were:

  • Download the pre-installed nanobsd image:
wget https://frafiles.pfsense.org/mirror/downloads/pfSense-CE-2.3.2-RELEASE-4g-amd64-nanobsd-vga.img.gz
  • Decompress the downloaded file and convert to a raw file:
gzip -dc pfSense-CE-2.3.2-RELEASE-4g-amd64-nanobsd-vga.img.gz | dd of=pfSense-CE-2.3.2.raw bs=1M
  • Upload the raw file to create an image on OpenStack:
glance image-create --file ./pfSense-CE-2.3.2.raw --name "pfSense 2.3.2" --disk-format raw --min-disk 4 --min-ram 512 --container-format bare --progress
  • Launch an instance from the "pfSense 2.3.2" image, attaching it to two networks.
  • Using the console for the new instance, complete the configuration steps, specifying vtnet0 as the WAN interface and vtnet1 as the LAN interface.
  • Using another VM on the LAN network, configure SSH port forwarding to relay http requests to the LAN interface of the pfSense VM. (See more details below.)
  • Making use of pfSense's Web UI, make the following additional configuration changes:
    • configure the LAN interface to use DHCP configuration.
    • configure NTP to use: 0.uk.pool.ntp.org
    • enable SSH access to the appliance
    • set the admin user's password to: Password123#
    • set the DNS server settings to: 8.8.8.8
  • Reboot the VM to ensure it starts up cleanly.
  • Snapshot the VM and then convert the snapshot to an image.
Clone this wiki locally